cube-js vulnerabilities
4 published CVEs name cube-js among the affected products.
- 4Published CVEs4 of them scored
- 2Last 12 monthspublished in the last year
- 1Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-25958
Cube privilege escalation via a specially crafted request
cube-js · cube
High7.7 - CVE-2026-25957
Cube Denial of Service (DoS) - An authenticated attacker can crash the server by sending a specially crafted request
cube-js · cube
Medium6.5 - CVE-2023-50709
Denial of service attack on the cube-api endpoint
cube-js · cube
Medium6.5 - CVE-2022-23510
SQl injection in cube-js
cube-js · cube.js
Critical9.6